Chain / Compliance
Compliance Attestation
⌘K
Chain synced
Chain · Module 07
Compliance Attestation
Continuous, cryptographic evidence collection mapped to regulatory frameworks. Auditors get read-only access to a live evidence portal.
Frameworks
+1
6
Controls passing
+4
309/357
Open gaps
-3
14
Avg. audit time
-68%
4.2days
Framework posture
live evidence coverage
SOC 2 Type II
64 controls · 4,218 evidence
94
score
60/64 passingnext: 2025-11-01
ISO 27001:2022
114 controls · 6,412 evidence
88
score
100/114 passingnext: 2025-09-14
HIPAA
78 controls · 2,210 evidence
76
score
59/78 passingnext: continuous
GDPR Art. 30
22 controls · 1,802 evidence
91
score
20/22 passingnext: continuous
FDA 21 CFR Part 11
34 controls · 3,140 evidence
82
score
28/34 passingnext: 2025-10-01
PCI-DSS v4
45 controls · 1,120 evidence
93
score
42/45 passingnext: 2026-01-01
Control detail
mapped evidence + owner
| Control ID | Name | Framework | Evidence | Owner | Status |
|---|---|---|---|---|---|
| CC6.1 | Logical access controls | SOC 2 | 42 anchored | IT-Sec | pass |
| CC7.2 | System monitoring | SOC 2 | 128 anchored | SRE | pass |
| A.8.24 | Cryptography use | ISO 27001 | 22 anchored | Sec-Eng | pass |
| 164.312(a) | PHI access control | HIPAA | 12 anchored | Clinical-IT | gap |
| Art. 30 | Records of processing | GDPR | 18 anchored | DPO | pass |
| § 11.10(e) | Audit trail (electronic records) | 21 CFR Part 11 | 88 anchored | QA | pass |
| § 11.200 | Electronic signature identifier | 21 CFR Part 11 | 6 anchored | QA | review |
| 3.5.1 | PAN protection | PCI-DSS | 14 anchored | Payments | pass |